subdomain bulmak (1 Viewer)

K

King

Joined
Dec 25, 2018
Credits
0
Rating - 0%
selam beyler

SALDIRI Modellemesi:
1- Ana domain'de açık bul.
1.A - Subdomain'de açık bul.

şimdi subdomain bulucu 2 yöntem ve 3 tool kullanımı göstereceğim.

Yöntem-1: Deneme-Yanılma Yoluyla
1- dnsmap
kullanımı : dnsmap site.com

Code: 
┌─[root@parrot]─[~]
└──╼ #dnsmap metu.edu.tr
dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)

[+] searching (sub)domains for metu.edu.tr using built-in wordlist
[+] using maximum random delay of 10 millisecond(s) between requests

ae.metu.edu.tr
IP address #1: 144.122.72.2

ak.metu.edu.tr
IP address #1: 144.122.145.133

ba.metu.edu.tr
IP address #1: 144.122.145.133

bi.metu.edu.tr
IP address #1: 144.122.145.145

blog.metu.edu.tr
IP address #1: 144.122.145.171

bs.metu.edu.tr
IP address #1: 144.122.145.145

ca.metu.edu.tr
IP address #1: 144.122.144.164

catalog.metu.edu.tr
IP address #1: 144.122.144.142

cc.metu.edu.tr
IP address #1: 144.122.145.146

ce.metu.edu.tr
IP address #1: 144.122.145.133

ci.metu.edu.tr
IP address #1: 144.122.145.133

cs.metu.edu.tr
IP address #1: 144.122.145.145

es.metu.edu.tr
IP address #1: 144.122.145.133

ftp.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:f101

ftp.metu.edu.tr
IP address #1: 144.122.144.177

go.metu.edu.tr
IP address #1: 144.122.144.164

gs.metu.edu.tr
IP address #1: 144.122.145.133

gt.metu.edu.tr
IP address #1: 144.122.144.164

guide.metu.edu.tr
IP address #1: 144.122.56.20

helpdesk.metu.edu.tr
IP address #1: 144.122.144.176

hi.metu.edu.tr
IP address #1: 144.122.145.145

hm.metu.edu.tr
IP address #1: 144.122.145.145

ia.metu.edu.tr
IP address #1: 144.122.144.164

id.metu.edu.tr
IP address #1: 144.122.144.169

ie.metu.edu.tr
IP address #1: 144.122.145.145

ii.metu.edu.tr
IP address #1: 144.122.145.145

im.metu.edu.tr
IP address #1: 144.122.145.174

imap.metu.edu.tr
IP address #1: 144.122.145.184

ipv6.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:5a9f

ipv6.metu.edu.tr
IP address #1: 144.122.144.190

ir.metu.edu.tr
IP address #1: 144.122.145.133

jt.metu.edu.tr
IP address #1: 144.122.145.171

library.metu.edu.tr
IP address #1: 144.122.201.150

login.metu.edu.tr
IP address #1: 144.122.144.55

mail.metu.edu.tr
IP address #1: 144.122.145.140

me.metu.edu.tr
IP address #1: 144.122.145.145

mi.metu.edu.tr
IP address #1: 144.122.145.145

mobile.metu.edu.tr
IP address #1: 144.122.144.147

mt.metu.edu.tr
IP address #1: 144.122.144.164

my.metu.edu.tr
IP address #1: 144.122.145.135

net.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:5a9f

net.metu.edu.tr
IP address #1: 144.122.144.190

ns1.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:ad01

ns1.metu.edu.tr
IP address #1: 144.122.144.171

ns2.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:ad02

ns2.metu.edu.tr
IP address #1: 144.122.144.170

pa.metu.edu.tr
IP address #1: 144.122.144.164

po.metu.edu.tr
IP address #1: 144.122.145.133

pop3.metu.edu.tr
IP address #1: 144.122.145.184

portal.metu.edu.tr
IP address #1: 144.122.144.48

rd.metu.edu.tr
IP address #1: 144.122.144.164

research.metu.edu.tr
IP address #1: 144.122.144.164

ro.metu.edu.tr
IP address #1: 144.122.144.164

sa.metu.edu.tr
IP address #1: 144.122.145.133

sb.metu.edu.tr
IP address #1: 144.122.144.169

services.metu.edu.tr
IP address #1: 144.122.144.108

sm.metu.edu.tr
IP address #1: 144.122.145.145

smtp.metu.edu.tr
IP address #1: 144.122.145.140

sp.metu.edu.tr
IP address #1: 144.122.145.145

tf.metu.edu.tr
IP address #1: 144.122.144.169

tt.metu.edu.tr
IP address #1: 144.122.144.164

vr.metu.edu.tr
IP address #1: 144.122.144.169

vw.metu.edu.tr
IP address #1: 144.122.144.164

web.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:8611

web.metu.edu.tr
IP address #1: 144.122.144.137

webadmin.metu.edu.tr
IP address #1: 144.122.145.133

webmail.metu.edu.tr
IP address #1: 144.122.144.156

www.metu.edu.tr
IP address #1: 144.122.145.153

[+] 68 (sub)domains and 68 IP address(es) found
[+] completion time: 781 second(s)
┌─[root@parrot]─[~]
└──╼ #

2- dnsdict6
kullanımı : atk6-dnsdict6 site.com

GmyXQN.png


3- fierce
kullanımı : fierce -dns site.com

Code: 
┌─[root@parrot]─[~]
└──╼ #fierce -dns metu.edu.tr
DNS Servers for metu.edu.tr:
   ns2.metu.edu.tr
   ns1.metu.edu.tr

Trying zone transfer first...
   Testing ns2.metu.edu.tr
       Request timed out or transfer not allowed.
   Testing ns1.metu.edu.tr
       Request timed out or transfer not allowed.

Unsuccessful in zone transfer (it was worth a shot)
Okay, trying the good old fashioned way... brute force

Checking for wildcard DNS...
Nope. Good.
Now performing 2280 test(s)...
144.122.72.2    ae.metu.edu.tr
144.122.145.130    lamus.cc.metu.edu.tr
144.122.145.131    korasion.general.services.metu.edu.tr.
144.122.145.132    korikos.general.services.metu.edu.tr.
144.122.145.133    labranda.general.services.metu.edu.tr.
144.122.145.134    hasankeyf.general.services.metu.edu.tr.
144.122.145.135    letoon.general.services.metu.edu.tr.
144.122.145.136    orfe.cc.metu.edu.tr
144.122.145.137    odtuclass2016sum.metu.edu.tr
144.122.145.138    ani-eski.general.services.metu.edu.tr.
144.122.145.139    samsat.general.services.metu.edu.tr.
144.122.145.140    frigya.general.services.metu.edu.tr.
144.122.145.141    varya.general.services.metu.edu.tr.
144.122.145.144    cordella.general.services.metu.edu.tr.
144.122.145.149    imprx03.general.services.metu.edu.tr.
144.122.145.150    martin.general.services.metu.edu.tr.
144.122.145.151    dng01.general.services.metu.edu.tr.
144.122.145.152    dng02.general.services.metu.edu.tr.
144.122.145.153    dng03.general.services.metu.edu.tr.
144.122.145.154    larissa.general.services.metu.edu.tr.
144.122.145.155    arsada.general.services.metu.edu.tr.
144.122.145.156    login2.metu.edu.tr
144.122.145.157    brussa.general.services.metu.edu.tr.
144.122.145.159    pervari.general.services.metu.edu.tr.
144.122.145.160    hattusas.general.services.metu.edu.tr.
144.122.145.161    adalia.general.services.metu.edu.tr.
144.122.145.162    bargilya.general.services.metu.edu.tr.
144.122.145.163    colossa.general.services.metu.edu.tr.
144.122.145.164    daskileon.general.services.metu.edu.tr.
144.122.145.166    odtuclass2016s.metu.edu.tr
144.122.145.167    sura20141.general.services.metu.edu.tr.
144.122.145.168    sura20161.general.services.metu.edu.tr.
144.122.145.169    sura2017s.general.services.metu.edu.tr.
144.122.145.170    sura20151.general.services.metu.edu.tr.
144.122.145.173    sura20153.general.services.metu.edu.tr.
144.122.145.174    gordion.cc.metu.edu.tr
144.122.145.175    tutkarin-cc.general.services.metu.edu.tr.
144.122.145.176    ebys.metu.edu.tr
144.122.145.177    fiskos.general.services.metu.edu.tr.
144.122.145.178    tenedos.general.services.metu.edu.tr.
144.122.145.179    tripolis.general.services.metu.edu.tr.
144.122.145.180    santos.general.services.metu.edu.tr.
144.122.145.182    kalkedon.general.services.metu.edu.tr.
144.122.145.183    nisa2.general.services.metu.edu.tr.
144.122.145.184    imap.metu.edu.tr
144.122.145.185    goknar.general.services.metu.edu.tr.
144.122.145.186    sura2017f.general.services.metu.edu.tr.
144.122.145.187    imprx01.general.services.metu.edu.tr.
144.122.145.188    imprx02.general.services.metu.edu.tr.
144.122.145.133    ak.metu.edu.tr
144.122.144.137    ankyra.general.services.metu.edu.tr.
144.122.144.132    sardis.general.services.metu.edu.tr.
144.122.144.127    prntrnx.registration.services.metu.edu.tr.
144.122.144.122    milas-yeni.cc.metu.edu.tr
144.122.144.117    milasd0.registration.services.metu.edu.tr.
144.122.144.112    terme.registration.services.metu.edu.tr.
144.122.144.107    milas.registration.services.metu.edu.tr.
144.122.144.104    lpar1.registration.services.metu.edu.tr.
144.122.144.99    kg.registration.services.metu.edu.tr.
144.122.144.94    mindosmgr.general.services.metu.edu.tr.
144.122.144.89    apollon6.registration.services.metu.edu.tr.
144.122.144.84    apollon1.registration.services.metu.edu.tr.
144.122.144.79    klaros.registration.services.metu.edu.tr.
144.122.144.77    kdng01.registration.services.metu.edu.tr.
144.122.144.80    register.metu.edu.tr
144.122.144.81    perge.registration.services.metu.edu.tr.
144.122.144.82    pisidia.registration.services.metu.edu.tr.
144.122.144.85    apollon2.registration.services.metu.edu.tr.
144.122.144.86    apollon3.registration.services.metu.edu.tr.
144.122.144.87    apollon4.registration.services.metu.edu.tr.
144.122.144.88    apollon5.registration.services.metu.edu.tr.
144.122.144.90    mindos1.registration.services.metu.edu.tr.
144.122.144.91    mindos2.registration.services.metu.edu.tr.
144.122.144.92    mindos.registration.services.metu.edu.tr.
144.122.144.93    mindos3.registration.services.metu.edu.tr.
144.122.144.97    apollon7.registration.services.metu.edu.tr.
144.122.144.98    apollon8.registration.services.metu.edu.tr.
144.122.144.105    lpar2.registration.services.metu.edu.tr.
144.122.144.106    lpar3.registration.services.metu.edu.tr.
144.122.144.108    goktepe.registration.services.metu.edu.tr.
144.122.144.109    harput.registration.services.metu.edu.tr.122.144.in-addr.arpa.
144.122.144.110    lpr2d0.registration.services.metu.edu.tr.
144.122.144.111    artemis1.registration.services.metu.edu.tr.
144.122.144.113    termed0.registration.services.metu.edu.tr.
144.122.144.114    lpr3d0.database.services.metu.edu.tr.
144.122.144.115    lpar1klon.registration.services.metu.edu.tr.
144.122.144.116    gobeklitepe.registration.services.metu.edu.tr.
144.122.144.118    artemis.registration.services.metu.edu.tr.
144.122.144.119    kayit-temp.registration.services.metu.edu.tr.122.144.in-addr.arpa.
144.122.144.121    demre.registration.services.metu.edu.tr.
144.122.144.123    lpar1eski.registration.services.metu.edu.tr.
144.122.144.124    gupi.registration.services.metu.edu.tr.
144.122.144.126    catalhoyuk.registration.services.metu.edu.tr.
144.122.144.129    gw.general.services.metu.edu.tr
144.122.144.130    didim.general.services.metu.edu.tr.
144.122.144.131    apomea.general.services.metu.edu.tr.
144.122.144.133    sia2c.cc.metu.edu.tr
144.122.144.135    abdera.general.services.metu.edu.tr.
144.122.144.138    magellan.general.services.metu.edu.tr.
144.122.144.139    abidos.general.services.metu.edu.tr.
144.122.144.140    milet-y.general.services.metu.edu.tr.
144.122.144.141    ocean.general.services.metu.edu.tr.
144.122.144.142    milet.general.services.metu.edu.tr.
144.122.144.143    alabanda.general.services.metu.edu.tr.
144.122.144.144    lagun.general.services.metu.edu.tr.
144.122.144.145    lytri.general.services.metu.edu.tr.
144.122.144.146    ftpkernel.metu.edu.tr
144.122.144.147    daphne.cc.metu.edu.tr
144.122.144.148    demreski.general.services.metu.edu.tr.
144.122.144.149    hasankeyf-test.general.services.metu.edu.tr.
144.122.144.151    cds.cc.metu.edu.tr
144.122.144.153    limyra.general.services.metu.edu.tr.
144.122.144.154    phaselis.general.services.metu.edu.tr.
144.122.144.155    balina-yeni.general.services.metu.edu.tr.
144.122.144.156    neocean.general.services.metu.edu.tr.
144.122.144.158    gergis.general.services.metu.edu.tr.
144.122.144.160    sagalasos.general.services.metu.edu.tr.
144.122.144.161    akalisus.general.services.metu.edu.tr.
144.122.144.162    amisos.general.services.metu.edu.tr.
144.122.144.163    ankyra2.general.services.metu.edu.tr.
144.122.144.165    sestos.general.services.metu.edu.tr.
144.122.144.166    ozkonak.general.services.metu.edu.tr.
144.122.144.167    imbros.general.services.metu.edu.tr.
144.122.144.168    mestos.general.services.metu.edu.tr.
144.122.144.169    elaia.general.services.metu.edu.tr.
144.122.144.170    ns2.metu.edu.tr
144.122.144.171    ns1.metu.edu.tr
144.122.144.172    iasos.general.services.metu.edu.tr.
144.122.144.173    salamis.general.services.metu.edu.tr.
144.122.144.174    hidas.general.services.metu.edu.tr.
144.122.144.175    tutkarin.general.services.metu.edu.tr.
144.122.144.176    fertek.general.services.metu.edu.tr.
144.122.144.177    kaymakli.general.services.metu.edu.tr.
144.122.144.178    aspendos.general.services.metu.edu.tr.
144.122.144.179    parion.cc.metu.edu.tr
144.122.144.180    bergama.general.services.metu.edu.tr.
144.122.144.181    mucur.general.services.metu.edu.tr.
144.122.144.182    allianoi.general.services.metu.edu.tr.
144.122.144.183    ankyraf.general.services.metu.edu.tr.
144.122.144.184    pinara.general.services.metu.edu.tr.
144.122.144.185    uzuncaburc.general.services.metu.edu.tr.
144.122.144.186    neapolis.general.services.metu.edu.tr.
144.122.144.187    doron.general.services.metu.edu.tr.
144.122.144.188    guzelyurt.cc.metu.edu.tr
144.122.144.189    nemrut.general.services.metu.edu.tr.
144.122.144.190    deimos.general.services.metu.edu.tr.
144.122.144.194    ankyram.database.services.metu.edu.tr.
144.122.144.142    application.metu.edu.tr
144.122.145.133    ars.metu.edu.tr
144.122.144.130    auth.metu.edu.tr
144.122.145.133    ba.metu.edu.tr
144.122.145.133    bbs.metu.edu.tr
144.122.145.145    bi.metu.edu.tr
144.122.145.171    blog.metu.edu.tr
144.122.1.200    cache-gw.cc.metu.edu.tr
144.122.1.199    tarator.metu.edu.tr
144.122.1.201    borda.metu.edu.tr
144.122.1.202    cache2.metu.edu.tr
144.122.1.203    cache3.metu.edu.tr
144.122.1.205    border.metu.edu.tr
144.122.145.145    bs.metu.edu.tr
144.122.144.164    ca.metu.edu.tr
144.122.1.201    cache.metu.edu.tr
144.122.144.142    catalog.metu.edu.tr
144.122.145.146    cc.metu.edu.tr
144.122.144.137    cgi.metu.edu.tr
144.122.145.133    ci.metu.edu.tr
144.122.145.133    conf.metu.edu.tr
144.122.145.145    cs.metu.edu.tr
144.122.144.164    designer.metu.edu.tr
144.122.145.133    es.metu.edu.tr
144.122.56.96    kursat.ceit.metu.edu.tr
144.122.56.92    deploy-pc.ceit.metu.edu.tr
144.122.56.87    polo.ceit.metu.edu.tr
144.122.56.84    floss.ceit.metu.edu.tr
144.122.56.86    ceit420.ceit.metu.edu.tr
144.122.56.90    gulenay.ceit.metu.edu.tr
144.122.56.97    kc.ceit.metu.edu.tr
144.122.56.99    itserver.ceit.metu.edu.tr
144.122.56.100    lab.ceit.metu.edu.tr
144.122.56.98    eta.metu.edu.tr
144.122.144.177    ftp.metu.edu.tr
144.122.144.177    ftp2.metu.edu.tr
144.122.144.164    go.metu.edu.tr
144.122.145.133    gs.metu.edu.tr
144.122.144.164    gt.metu.edu.tr
144.122.144.176    helpdesk.metu.edu.tr
144.122.145.145    hi.metu.edu.tr
144.122.145.145    hm.metu.edu.tr
144.122.144.164    ia.metu.edu.tr
144.122.144.169    id.metu.edu.tr
144.122.145.145    ie.metu.edu.tr
144.122.145.174    im.metu.edu.tr
144.122.145.133    ir.metu.edu.tr
144.122.145.146    lib.metu.edu.tr
144.122.201.150    lidya.external.servers.metu.edu.tr.
144.122.201.152    misya.external.services.metu.edu.tr.
144.122.201.150    library.metu.edu.tr
144.122.144.53    trapezos.cc.metu.edu.tr
144.122.144.48    amida.cc.metu.edu.tr
144.122.144.43    knossos.cc.metu.edu.tr
144.122.144.40    lamida.cc.metu.edu.tr
144.122.144.37    ainos.cc.metu.edu.tr
144.122.144.42    ida.cc.metu.edu.tr
144.122.144.44    phaistos.cc.metu.edu.tr
144.122.144.45    zakros.cc.metu.edu.tr
144.122.144.46    agonya.cc.metu.edu.tr
144.122.144.47    byze.cc.metu.edu.tr
144.122.144.49    dardania.cc.metu.edu.tr
144.122.144.54    troya.cc.metu.edu.tr
144.122.144.55    zelitis.cc.metu.edu.tr
144.122.144.55    login.metu.edu.tr
144.122.145.140    mail.metu.edu.tr
144.122.144.175    map.metu.edu.tr
144.122.145.145    me.metu.edu.tr
144.122.145.145    mi.metu.edu.tr
144.122.144.147    mobile.metu.edu.tr
144.122.144.190    monitor.metu.edu.tr
144.122.144.164    mt.metu.edu.tr
144.122.145.135    my.metu.edu.tr
144.122.144.190    net.metu.edu.tr
144.122.144.164    pa.metu.edu.tr
^C
┌─[✗]─[root@parrot]─[~]
└──╼ #

Yöntem-2: Dork Yoluyla
Dork: site:*.metu.edu.tr

nQJoE0.png


Kaynak: Kodlab - Kali Linux
 
You must log in or register to reply here.

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)
Top